I appreciate defense-in-depth and all that, but isn't SFTP itself adequate security? I can see restricting FTP but what's the motivation for doing so with SFTP?